04a1a1f75758efc31b0c78ee4f889d19a83e9cd57d6c226250c0716e199d31aa

Analysis

user interaction
yes
max time kernel
34s
max time network
32s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/05/2026, 06:33

Target
18311033.exe
Size 2.0MB
Sample260522-ha83lsft9q
SHA256 04a1a1f75758efc31b0c78ee4f889d19a83e9cd57d6c226250c0716e199d31aa
MD5 e819ed5a92a38986c52ebd8fa7671894
SHA1 28774d01d9ec60c494a0052faa426cf1b74e67de
SHA512 2627a5f46ccd73f6b7e00d79cacf00cd8b9611f7610324df3d708c951208aef09181eb35c13508a81e3f1b2e70c1553001d9884db6265e1107de82042daa00a7
SSDEEP 49152:9MSPbcBVQej/1INx+TSqTdXP6SAy/utMv12:9PoBhz1axcSU96SA
TLSH
T1089523CAB37163B8F021A270C5A74A16EBF2349623A7534F9FD04AF61E13B945B15363
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3504	5096	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\18311033.exe
"C:\Users\Admin\AppData\Local\Temp\18311033.exe"
1⤵
PID:5096
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5096 -s 8
  2⤵
  - Program crash
  PID:3504

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 5096 -ip 5096
1⤵
PID:1944